What is the primary purpose of DNSSEC in Windows Server DNS?

To ensure the integrity and authenticity of DNS responses by using digital signatures

To encrypt DNS queries and responses to protect privacy

To block malicious websites by filtering DNS queries

To speed up DNS resolution by caching responses

You have an Azure Private DNS zone named internal.contoso.com linked to a VNet. You have an on-premises DNS server that needs to resolve names in that zone. You have deployed an Azure DNS Private Resolver with an inbound endpoint. However, on-premises clients cannot resolve names in the private zone. You have verified that the conditional forwarder on the on-premises DNS server points to the inbound endpoint's IP address. What is the most likely cause of the failure?

The inbound endpoint is not in the same VNet as the private zone's linked VNet.

The conditional forwarder is configured with a short timeout.

The on-premises DNS server is using TCP instead of UDP for forwarding.

The private zone is not linked to the VNet where the inbound endpoint resides.

Your on-premises network is connected to Azure via ExpressRoute. You have an Azure Private DNS zone for a set of VMs. You want on-premises servers to resolve names in that private zone without deploying a DNS server VM in Azure. What should you implement?

Azure DNS Private Resolver with an inbound endpoint and a conditional forwarder on-premises.

A public DNS zone with the same records.

A conditional forwarder to 168.63.129.16 from on-premises.

A VPN-based DNS forwarder VM in Azure.

What is the primary purpose of a conditional forwarder in Windows Server DNS?

To forward all queries to a single external DNS server

To forward queries for a specific domain to a designated DNS server

To provide DNS resolution for reverse lookup zones

To block queries for certain domains

What is the purpose of creating a DNS zone in Windows Server?

To forward all DNS queries to an external DNS server

To store DNS records in a flat file without any hierarchical structure

To provide an IP address to a hostname for a single computer only

To organize and manage a portion of the DNS namespace for which a server is authoritative

Microsoft Certified:Windows Server Hybrid Administrator Associate

Domain 4Objective 1

Implement On-Premises and Hybrid Name Resolution AZ-800 Practice Questions (Page 6)

Part of the Implement and manage an on-premises and hybrid networking infrastructure domain, which accounts for 15–20% of the AZ-800 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~6–13 in this domain), expect 2–4 from this objective — we provide 46 practice questions to prepare you well beyond it. (estimate)

46questions here

10free pages

10concepts

15–20%of the exam

Questions 26–30

26foundation · easy
What is the primary purpose of DNSSEC in Windows Server DNS?
Select an answer first
27expert · hard
You have an Azure Private DNS zone named internal.contoso.com linked to a VNet. You have an on-premises DNS server that needs to resolve names in that zone. You have deployed an Azure DNS Private Resolver with an inbound endpoint. However, on-premises clients cannot resolve names in the private zone. You have verified that the conditional forwarder on the on-premises DNS server points to the inbound endpoint's IP address. What is the most likely cause of the failure?
Select an answer first
28application · medium
Your on-premises network is connected to Azure via ExpressRoute. You have an Azure Private DNS zone for a set of VMs. You want on-premises servers to resolve names in that private zone without deploying a DNS server VM in Azure. What should you implement?
Select an answer first
29foundation · easy
What is the primary purpose of a conditional forwarder in Windows Server DNS?
Select an answer first
30foundation · easy
What is the purpose of creating a DNS zone in Windows Server?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AZ-800

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AZ-800” is a trademark of its owner, used for identification only.